Cloud Security Product Owner X 2

Position Title: Cloud Security Product Owner
Location: Toronto, ON
Duration: 6 months

Story Behind the Need
Business group: CAP Program – Cloud Acceleration Program
Project: Implementing CNAPP (Cloud Native Application Protection Platform) product across the organization – overseeing the CNAPP product implementation through the full lifecycle (from inception to full maturity) – phase: have started implementing but at early stages; project will go into the next 2-3 years
Both positions are for same project but will be doing different things:
1st position – Workload Protection – working with containers and servers in infrastructure, key vaults, SQL servers
2nd position – Infrastructure Entitlement – about permissions and roles, working with GIAM
Candidate Value Proposition:
The successful candidates will have the opportunity to work on a high-visibility project within a growing and expanding team, lots of opportunity to grow their skillset; opportunity to work on a high profile cloud security project; if can bring value they will be able to showcase skillset to key audiences.
– possibility for extension/retention of the resource, looking for someone who is keen to learn the project in depth and be open to FTE conversion to keep working on it
Typical Day in Role:

• Closely working with architects on technical product solutioning and entablements
• Responsible for defining the product requirements, prioritizing features, and managing the product development process
• Collaborate with stakeholders across the Bank – cloud security engineering, technology, security architecture, security advisory, network – to drive CNAPP PoC, vendor selection and Business Case for implementation
• Will work closely with IS&C stakeholders to define an intake model for all Cloud Security initiatives and work with channel teams to capture requirements and build a roadmap for implementation
• Communicate regularly with various business channels on the progress made for various projects in the pipeline
• Manage and prioritize the product backlog, along with new features and enhancements we require from the product
• Product Strategy
• Contribute to the success of our product strategy by driving stakeholder alignment, maintaining a clear RACIs and clearly articulating MVP success criteria and rollout plans
• Facilitate forums and prepare the team for constructive collaboration sessions with cross-functional teams, technology and business channels, and control functions
• Define and report on overall product status, metrics, key achievements, next steps and risks with a data-driven approach

Candidate Requirements/Must Have Skills:

• 10+ years’ relevant working experience in IT (application development, security etc.)
• 5+ years’ experience as an IT Product Manager or Delivery Lead
• 5+ years’ experience with Cloud Security domains including IAM, encryption, network security, compliance familiarity with security tools such as CNAPP
• 5+ years’ experience with major cloud platforms (Azure and/or GCP – need at least one of these)
• 5+ years’ experience with documenting process, requirements, and product information

Nice-To-Have Skills:

• Experience with DevSecOps practices and infrastructure as code (IaC)
• 5+ years’ experience with CI/CD Pipeline tools and processes like BigQuery, BitBucket/GitHub, Jfrog Artifactory, Ansible, Confluence, Jira, Bamboo etc
• Proficiency in APIs, microservices, and cloud automation tools.
• 5+ years’ experience in the financial industry or tech/startups
• GIAM experience

Soft Skills Required:

• Excellent presentation skills – as a Product Manager, you will be the spokesperson for your product to the organization at large
• Proven experience in managing relationships with customers, partners, and third-party vendors.
• Demonstrable communication capability including verbal presentations to senior leadership

Education:

• Bachelors in technical field
• Relevant certifications such as Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM) as an asset

Best VS. Average Candidate:
Need someone who is very strong technically and able to articulate complex technical terms and translate into business terms; security and cloud technical expertise sought; able to manage stakeholder relationships; strong with Cloud Security takes precedence over nice to haves so someone very strong with the must haves will be considered even if don’t have all the nice to haves
Candidate Review & Selection
1 round – MS Teams Video Interview – 45 minutes – going through experience, behavioral – with HM, and Director

Hiring Manager’s availability to interview: ASAP